Overview

overview

10

Static

static

3

2024-09-23...ch.exe

windows7-x64

1

2024-09-23...ch.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-23_be19817a502d58efb565f61591cd5aab_cobalt-strike_poet-rat_snatch

  • Size

    22.4MB

  • Sample

    240923-tmf35ssbnk

  • MD5

    be19817a502d58efb565f61591cd5aab

  • SHA1

    2724dd77fe76d9757a41867589d538e0d553336e

  • SHA256

    4fb369ab0a11c70be0d8861c2483623a1e0f91ca62445985d64b3fe6b37349a1

  • SHA512

    9fafbbf5f4983b2b59b9413257b83239e329cc0d84e8ec6bce9f817eb5251352640d4aa91522d6367c60036a7bbd33bcb0e7d12c74bbb4b17aff70c0fabba4b4

  • SSDEEP

    393216:Io2QxYD1/gzQnSegNPCQM2/psErTmlJhjePxnIOLDFee:R2p4zQnSxJCQHscmNePxnv8e

Score
10/10
hackbrowserdatadiscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      2024-09-23_be19817a502d58efb565f61591cd5aab_cobalt-strike_poet-rat_snatch

    • Size

      22.4MB

    • MD5

      be19817a502d58efb565f61591cd5aab

    • SHA1

      2724dd77fe76d9757a41867589d538e0d553336e

    • SHA256

      4fb369ab0a11c70be0d8861c2483623a1e0f91ca62445985d64b3fe6b37349a1

    • SHA512

      9fafbbf5f4983b2b59b9413257b83239e329cc0d84e8ec6bce9f817eb5251352640d4aa91522d6367c60036a7bbd33bcb0e7d12c74bbb4b17aff70c0fabba4b4

    • SSDEEP

      393216:Io2QxYD1/gzQnSegNPCQM2/psErTmlJhjePxnIOLDFee:R2p4zQnSxJCQHscmNePxnv8e

    Score
    10/10
    hackbrowserdatadiscoveryinfostealerspywarestealer

    • An open source browser data exporter written in golang.

    • HackBrowserData

      An open source golang web browser extractor.

      infostealerhackbrowserdata

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks